Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you create an account, including your name, email address, phone number, school affiliation, and role within your school community (e.g., parent, school administrator, PAC member). For parents and guardians, we may also collect student information such as name, grade, teacher, and dietary requirements necessary for hot lunch ordering, event participation, and other school activities.

When you place an order or make a payment through Paxaver, we collect transaction-related information including order details, billing address, and payment method identifiers. Payment card data is processed directly by our payment processor, Stripe, and is never stored on our servers. We also collect technical usage data such as device information, IP address, browser type, and interaction logs to operate and improve the platform.

2. How We Use Your Information

We use your personal information to provide and operate the Paxaver platform, including managing accounts, processing hot lunch orders, coordinating fundraising campaigns, organizing events and volunteer sign-ups, facilitating merchandise sales, and enabling communication between parents, schools, and PACs. We also use your information to process payments, send order confirmations and receipts, and deliver important service notifications.

Additionally, we use your information to communicate with you about platform updates, new features, and policy changes, to monitor and improve the performance and security of our services, to troubleshoot technical issues, and to comply with applicable legal and regulatory obligations. Aggregated and de-identified data may be used for analytics and product development purposes.

3. Cookies and Tracking Technologies

Paxaver uses cookies and similar tracking technologies (such as web beacons and pixel tags) to recognize your browser, remember your preferences, maintain your session, and understand how you interact with the platform. We use essential cookies that are necessary for the service to function properly, as well as analytics cookies to measure traffic and improve user experience. You can control or disable cookies through your browser settings, though some features of the platform may not function properly without them.

4. Information Sharing and Disclosure

We do not sell your personal information to third parties. We share information with trusted service providers who support our operations, such as Stripe for payment processing, Amazon SES for transactional email delivery, and Cloudflare for content delivery and security. These providers are bound by contractual obligations to protect your data and are only permitted to use it to provide services on our behalf.

We share relevant information with school administrators and PAC members who manage your school's Paxaver account, such as order details, volunteer sign-ups, and contact information necessary for school operations. We may also disclose your information when required by law, court order, or government regulation, or when we believe in good faith that disclosure is necessary to protect the rights, safety, or property of our users or the public.

5. Data Storage, Security, and International Transfers

Paxaver is hosted on the Cloudflare global network, which provides enterprise-grade infrastructure with robust physical and environmental security controls. We protect your data using encryption in transit (TLS/SSL) and at rest, strict role-based access controls, and regular security reviews. Access to personal information is limited to authorized Smartoire personnel who require it to perform their job functions, and all access is logged and monitored. While we implement industry-standard security measures, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Because Paxaver is hosted on the Cloudflare global network, your data may be stored and processed in data centers located in Canada and the United States. If you are accessing the service from outside these regions, your information may be transferred to and processed in a country with different data protection laws. We take appropriate measures to ensure that your personal information remains protected in accordance with this Privacy Policy and applicable law, including the use of standard contractual clauses and other legal transfer mechanisms where required.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. Transaction records, order history, and financial data are retained for the period necessary to comply with legal, accounting, and tax reporting requirements, typically up to seven years. When you close your account, we will delete or anonymize your personal information within a reasonable period, except where we are required to retain it for legal or operational reasons.

7. Your Privacy Rights

Depending on your jurisdiction, you may have the right to access the personal information we hold about you, request correction of inaccurate information, request deletion of your personal data, and request a copy of your data in a portable, machine-readable format. You may also have the right to object to or restrict certain processing of your data, withdraw consent where processing is based on consent, and opt out of marketing communications at any time.

Residents of the European Union and United Kingdom are entitled to rights under the General Data Protection Regulation (GDPR), and residents of Canada are entitled to rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. To exercise any of these rights, please contact us at support@paxaver.com, and we will respond within the timeframe required by applicable law.

8. Children's Privacy

Paxaver is a school community platform used by schools, PACs, and parents to manage activities involving students. The platform is not directed at children under the age of 13, and children do not create accounts or interact with the service directly. Student information is provided by parents, guardians, or school staff for the purpose of participating in school programs such as hot lunch ordering, events, and volunteer activities. We comply with the Children's Online Privacy Protection Act (COPPA) and the Family Educational Rights and Privacy Act (FERPA) where applicable, and we process student data only at the direction of and with the authorization of the school or parent. Schools using Paxaver are responsible for obtaining necessary consents from parents and guardians regarding the collection and use of student information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the features of our platform. When we make material changes, we will notify you by email or through a prominent notice within the service prior to the effective date. We encourage you to review this policy periodically. Your continued use of Paxaver after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at support@paxaver.com, or use the feedback link in the footer.